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CONTEXT PRIVACY FOR DELIVERY OF 
CONTEXT-AWARE CONTENT FOR WIRELESS 

TERMINALS 



CROSS-REFERENCE TO RELATED APPLICATIONS 
[0001] This application claims benefit of U.S. Provisional 

application No. 60/223,131, filed August 7, 2000, the content 

of which is herein incorporated by reference in its entirety. 

TECHNICAL FIELD 
[0002] This invention relates to wireless communication 
systems, and more particularly to providing delivery of 
context aware content and actions to handsets in wireless 
communication systems, while maintaining privacy with respect 
to each handset's particular context. 

BACKGROUND 

[0003] The desire to use information in wireless 
communication systems is constantly increasing. With the 
increased use of the wireless web on cellular telephones, the 
versatility and potential of the wireless communication 
systems is increasing. For example, cellular phones may 
execute programs when certain conditions are met. However, 
the desire to maintain privacy of the user needs to be 
balanced with the convenience of executing programs based on 
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user data. What is desired is a means to manage the 
distribution of information and instructions to wireless 
terminals to minimize divulging private information through 
actions with entities external to the mobile station. 



monitors a plurality of contextual conditions with respect to 
its current conditions. The contextual conditions may define 
a characteristic, such as the location of the mobile station 
or a time frame. Instructions, content and context 
information can be distributed by a central database to the 
mobile station. Instructions and context descriptions may be 
generated in a way such that they encapsulate detection of 
context and execution of associated actions so that the 
context of the mobile station is kept private. The mobile 
station monitors data to determine when the contextual 
conditions are satisfied. The mobile station may then run 
programs based on the satisfied contextual conditions. A 
server may generate, monitor, control the distribution of 
instructions and content and context information to terminals 
to perform such actions based on contextual conditions. A 
server distributes such information to minimize the amount or 



SUMMARY 
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A mobile station in a wireless communication system 
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type of private information that wireless terminals will 
divulge when acting on those conditions. 

DESCRIPTION OF DRAWINGS 
[0005] These and other features and advantages of the 
invention will become more apparent upon reading the following 
detailed description and upon reference to the accompanying 
drawings . 

[0006] Figure 1 illustrates components of a wireless 
communication system appropriate for use with an embodiment of 
the invention. 

[0007] Figure 2 is a block diagram showing features of a 
mobile station according to one embodiment of the invention. 
[0008] Figure 3 illustrates a process for using the 
contextual conditions in a program according to one embodiment 
of the present invention. 

DETAILED DESCRIPTION 
[0009] Figure 1 illustrates components of a wireless 
communication system. A mobile switching center 102 
communicates with a base station 104. The base station 104 
broadcasts data to and receives data from mobile stations 106 
within a cell 108. The cell 108 is a geographic region, 
roughly hexagonal, having a radius of up to 35 kilometers or 
possibly more. 
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[0010] 



The mobile station 106 is capable of receiving data 



from and transmitting data to a base station 104. Additional 
cells adjacent to the cell 108 permit mobile stations 106 to 
cross cell boundaries without interrupting communications. 
This is because base stations 104 in adjacent cells assume the 
task of transmitting and receiving data for the mobile 
stations 106. The mobile switching center 102 may coordinate 
all communication to and from mobile stations 106 in a multi- 
cell region, thus the mobile switching center 102 may 
communicate with many base stations 104. 

[0011] A program generator and distributor contained in 
server 110 delivers programs, generated according to one 
embodiment of this invention, and containing action and 
context description pairs, to the mobile stations 106. The 
deliveries could be triggered by a request from a mobile 
station or simply delivered to the mobile stations at the 
choice of the program generator and distributor in the server 
110. 

[0012] The mobile stations 106 may move about freely within 
the cell 108 while communicating either voice or data. The 
mobile stations 106 not in active communication with other 
telephone system users may, nevertheless, scan base station 
104 transmissions in the cell 108 to detect any telephone 
calls or paging messages directed to the mobile station 106. 
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[0013] 



One example of such a mobile station 106 is a 



cellular telephone used by a pedestrian who, expecting a 
telephone call, powers on the cellular telephone while walking 
in the cell 108. The cellular telephone synchronizes 
communication with the base station 104. The cellular 
telephone then registers with the mobile switching center 102 
to make itself known as an active user within the wireless 
network. 

[0014] The mobile station 106 scans data frames broadcast 
by the base station 104 to detect any telephone calls or 
paging messages directed to the cellular telephone. In this 
call detection mode, the mobile station 106 receives, stores 
and examines paging message data, and determines whether the 
data contains an identifier matching an identifier of the 
mobile station 106. If a match is detected, the mobile 
station 106 establishes a call with the mobile switching 
center 102 via the base station 104. If no match is detected, 
the mobile station 106 enters an idle state for a 
predetermined period of time, then exits the idle state to 
receive another transmission of paging message data. 
[0015] Figure 2 shows a block diagram of the mobile station 
106 and the processing that occurs in that mobile station 106. 
The processor 2 00 is driven by a program stored in a memory 
205. Contextual information and associated instructions for 
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the mobile station 106 may also be stored in another part of 
memory shown here as 210. The memory 205 stores various 
conditions including information obtained from searches to 
base stations. 

[0016] Figure 3 illustrates a process 600 according to one 
embodiment for using the context information 305 to trigger 
execution of actions generated according to one embondiment of 
the present invention. The process 600 begins in START block 
605. Proceeding to block 610, the mobile station 106 detects 
if a contextual condition is satisfied. The contextual 
condition may be identified by a context description. For 
example, the contextual condition may be that the user is 
arriving at a particular location, such as the office. The 
mobile station may monitor positioning systems to determine 
when the contextual condition is satisfied. 
[0017] Proceeding to block 615, the mobile station 106 
determines if any action is necessary based on the contextual 
conditions. For example, the user may desire the mobile 
station 106 to place a call to a voice mail system upon arrival 
at the office. The mobile station 106 matches the satisfied 
contextual condition with a desired action. Other examples of 
actions are retrieving a web page, powering down the mobile 
station, executing a program, requesting information, reset 
user preferences, or any other desired actions. 
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[0018] 



Proceeding to block 620, the mobile station 106 



retrieves the action instructions. The instructions may be 
retrieved from a wireless web browser, from the wireless 
service provider, or may be stored within the mobile station. 
The action instructions may be generated manually or 
automatically by a server or other entity that has a wealth of 
contextual information such as geographical information 
databases, network databases, user profile database, and 
others. The instructions encapsulate detection of context and 
execution of associated actions so that that context 
information is kept private to the user. For example, when 
the mobile detects it is near a mall, it retrieves an 
advertisement from a URL while no private location information 
is disclosed. 

[0019] The server 110 that generates the instructions may 
translate application requirements into programs either 
manually or automatically. The instructions contain action 
and context description pairs where the action is executed 
when the context description is satisfied. In the process, or 
independently, the entity may monitor the generation of such 
programs to determine if external actions that may result from 
detection of certain context conditions implicitly disclose 
certain private information. This may be done with a simple 
comparison of how many different contexts or conditions result 
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in the same external action (external refers to external to 
the mobile such as a web-page access) . If the number is small 
or only one, then the action implicitly gives up private 
information. For example, if only one very strictly defined 
location context results in the access of a specific 3rd party 
URL, then this could be flagged as potentially dangerous to 
the user of the mobile device or the application request could 
be rejected. Alternatively, the program may be re-written or 
modified such that the implicit disclosure of private 
information is reduced or eliminated. For example, the entity 
may generate additional contexts with the same action to 
artificially mask the private information. 
[0020] Proceeding to block 625, the mobile station 106 
executes the action instructions. The action instructions may 
be persistent programs that are stored in the mobile terminal 
or peripheral equipment. In this way, the context-based 
monitoring is split between server and mobile to maintain a 
desired level of precision, accuracy, privacy, resource 
utilization (distributed processing), air-link usage, etc. 
The programs may be executed upon download such as XML or WML 
pages. The programs may be a combination of these pages, and 
may also use extended capabilities of the wireless terminal to 
perform trigger checks and execute actions. The programs may 
be paired so that related programs execute on both the mobile 
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station 106 and a server. These programs may communicate with 
each other, and the programs may be generated by another 
program. The server program may also broker multiple context- 
sensitive applications. For example, if a third party 
advertising firm wants to send advertisements to a mobile 
station, then the server may manage and schedule the different 
requests appropriately. Thus, if the mobile station 106 
satisfies a contextual condition that states the mobile station 
106 is approaching a mall, the third party advertiser may send 
an ad for a store at the mall, but not know exactly where the 
mobile station 106 is located when the ad is being delivered. 
After the program is executed, the process terminates in END 
block 630. 



advertising, it is desirable to collect statistics. While the 
user's privacy is protected, the collection of statistical 



information may be complicated. However, with this invention, 
the programs can also include actions to collect statistics 
themselves and automatically inform a server or other entity 
of a number of "hits" that occurred. The mobile may do so 
anonymously by sending a mobile originated SMS or other 
anonymous URL post . 

[0022] The generation of programs may also be dependent on 
user profile information that is provided to or stored at a 

-9- 
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For some applications and services such as 
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server. The parameters of generation of programs may depend on 
certain user specified information or parameters specified by 
usage, purchase, ownership or membership, etc. For example, 
parameters may include: 

• Allow/disallow push delivery 

• Specify privacy levels of various context information 
(location, time, etc) 

• Allow/disallow history collection 

• Allow/disallow network access for specific purposes 

• Specify levels of allowances/disallowances 

• Age, preferences, history, identity 

• Anonymity: each access anonymous or anonymous but 
identified as the same user as before. 

• Application or services allowed to use information: 
Emergency only, bearer service only (ex: system 
selection only), local applications vs. remote 
applications . 

[0023] The programs described in this invention use 
building blocks that support detection of various contextual 
conditions and combinations thereof. The following building 
blocks are examples : 
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• Transitional/orientational conditions: before arriving 



at a location, after leaving a location, upon arriving 
at a location, or a combination thereof. 

• Delay conditions: after a specific period of time has 
passed since a transition occurred either of the same 
type, the same transition exactly, reversed, related 
or unrelated in some particular way. 

• Range conditions: after having traveled at least some 
distance from some other location or context. 

• Dynamic conditions: while stationary for a period if 
time, while traveling within a given speed range or 
set of ranges of speeds or at a specific speed or set 
of specified speeds. 

• Directional conditions: while moving in a specific 
direction or range or set of directions. 

• Precision/accuracy conditions: location is known 
precisely or not, accurately or not, within specified 
precisions or accuracies. 

• Sensitivity/integrity/risk conditions: location is 
known to be accurate with a certain probability or the 
location is known to be within some range with a 
certain probability or set of ranges with some 
associated probability distribution. 
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• Recurrence conditions: after having occurred a number 
of times or more or less than a specific number of 
times or the occurrence is a multiple of some number 
(example: every 5th occurrence) or other pattern. 

• Schedule/time conditions: at a specific time, range of 
times, dates, days, day(s) of the week, month, year, 
etc . 

• Bearer conditions: with certain defined signal 
conditions or range or set of signal conditions or 
available capabilities or resources. 

• Terminal state or status or mode: user profile, mode 
of usage, business or personal, happy or sad, mood, 
personality. Also, terminal processing load, 
interruption allowance (can another call or activity 
be interrupted), etc. 

[0024] Numerous variations and modifications of the 
invention will become readily apparent to those skilled in the 
art. Accordingly, the invention may be embodied in other 
specific forms without departing from its spirit or essential 
characteristics . 
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